Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3f359b7e-0fc9-3ab3-8785-6f2ff3a9e356.roa
File:                     3f359b7e-0fc9-3ab3-8785-6f2ff3a9e356.roa (raw, json)
Hash identifier:          qEl7oTxSe9okeJCfDaBfGxRVoXA+XyDYoa7b3hX9bKY=
Subject key identifier:   F8:A9:54:A8:2B:99:6D:16:4D:06:8F:55:B4:6F:4A:3E:40:13:CA:78
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285848037AF33BD09AF1E223D78DC0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3f359b7e-0fc9-3ab3-8785-6f2ff3a9e356.roa
Signing time:             Wed 27 Nov 2024 02:00:39 +0000
ROA not before:           Wed 27 Nov 2024 02:00:39 +0000
ROA not after:            Tue 25 Feb 2025 02:00:39 +0000
asID:                     10796
IP address blocks:        74.218.112.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:03:7a:f3:3b:d0:9a:f1:e2:23:d7:8d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Nov 27 02:00:39 2024 GMT
            Not After : Feb 25 02:00:39 2025 GMT
        Subject: CN=7d1db85e-0b27-468f-bdf8-c6b4321481d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a1:8b:d7:15:fb:ba:d1:ce:35:ee:aa:42:e3:
                    e4:56:0f:f5:56:8c:fc:f7:b9:cb:d1:15:71:13:41:
                    fd:ae:79:6c:2f:06:c5:c3:78:06:20:79:11:43:8d:
                    97:41:46:66:99:96:20:3b:de:f3:4f:52:5c:a4:4d:
                    32:76:44:ef:ab:ce:d0:10:bf:67:a5:dc:e8:0e:bb:
                    7e:39:77:98:e3:93:38:eb:d6:6e:e2:4c:a5:08:19:
                    69:bf:1d:0a:f5:87:1d:65:2e:a6:a8:fe:e0:e1:b8:
                    0b:9e:42:b4:db:c5:54:ca:e5:26:b9:e4:83:23:46:
                    a2:4f:e9:e8:c6:4e:aa:5c:da:e9:7c:c2:c3:e6:27:
                    72:75:37:de:0e:28:a8:91:65:28:01:87:06:4d:59:
                    e4:d4:86:e9:c9:bd:ba:ab:20:42:68:eb:2a:0b:c3:
                    fc:9d:4a:ae:3c:e8:fe:8f:39:ee:9e:6c:b8:c4:82:
                    03:86:c7:8c:ab:49:19:ca:0b:03:27:70:66:5e:3f:
                    3b:b0:81:79:e1:5c:37:c5:eb:94:02:42:b1:fd:2d:
                    ca:3f:f1:8d:8a:a9:78:4a:ed:26:80:7a:62:0f:a0:
                    07:ce:8e:d2:47:dc:1b:19:29:0c:37:02:d7:89:84:
                    ca:f7:13:ba:5f:dc:16:48:9a:31:78:2f:a4:38:7a:
                    29:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:A9:54:A8:2B:99:6D:16:4D:06:8F:55:B4:6F:4A:3E:40:13:CA:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3f359b7e-0fc9-3ab3-8785-6f2ff3a9e356.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.218.112.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:16:28:fa:73:52:e6:71:4c:4e:78:0a:3d:c7:eb:03:e5:e6:
         cd:1e:77:eb:54:78:4b:1d:bc:ee:65:00:e4:fe:68:c7:d9:68:
         32:20:9c:7a:ef:f0:3a:23:c6:72:7f:9e:96:eb:df:c6:a2:1d:
         09:f4:7d:1c:8c:24:a7:c0:12:c4:ee:41:af:12:ea:a7:81:9b:
         7b:7d:10:23:03:4e:55:ac:15:66:09:62:7e:11:d8:af:c7:53:
         31:d9:de:2e:7a:21:5e:1e:e9:c9:9f:19:ab:1a:b2:27:9b:40:
         d0:b7:28:37:24:c6:1c:05:f4:ec:1e:fe:98:a3:3e:1b:e5:3f:
         ec:1e:23:3f:a9:e0:f4:b1:9c:a7:2c:ae:b6:0b:e5:c8:2e:2c:
         8d:59:ea:13:22:92:80:d3:5e:d3:c6:81:13:b6:9f:be:04:cd:
         8f:60:73:f8:ac:cd:6e:09:23:35:87:dd:6f:b5:71:2c:40:71:
         8a:a3:81:35:97:f0:54:90:1b:66:6c:2d:c9:ab:e1:cf:7f:23:
         92:33:2c:0d:ec:cb:e6:79:81:2a:68:b4:72:e8:20:3c:3f:ab:
         90:ed:e6:b7:de:3d:0a:90:96:22:b2:1e:98:93:f3:8f:d2:b5:
         d8:fa:70:bb:9f:08:e3:4b:42:c0:b3:37:0d:37:93:47:cd:6b:
         05:b9:49:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:06:33 2025 by rpki-client